Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AsFirMsKYkNhFDbnVru1zhhrRvGEgq95xZcNkHp4CvYR/0/3139312e3234322e3233372e302f32342d3234203d3e20323633343834.roa
File:                     3139312e3234322e3233372e302f32342d3234203d3e20323633343834.roa (raw, json)
Hash identifier:          ZYRz0DEpqXvcbZE6Qc8oPCGZ4OeGV6LPL2erNFYjmC0=
Subject key identifier:   67:E8:DB:14:5B:C8:EF:ED:E1:61:3D:FD:D8:31:64:DA:D7:78:0B:96
Certificate issuer:       /CN=1698795302C7E2A145BFA93BF0B8C9B149DFD43D
Certificate serial:       0C77083FA3121EAF6CB866F7F264368EE769906C
Authority key identifier: 16:98:79:53:02:C7:E2:A1:45:BF:A9:3B:F0:B8:C9:B1:49:DF:D4:3D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1698795302C7E2A145BFA93BF0B8C9B149DFD43D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AsFirMsKYkNhFDbnVru1zhhrRvGEgq95xZcNkHp4CvYR/0/3139312e3234322e3233372e302f32342d3234203d3e20323633343834.roa
Signing time:             Wed 04 Dec 2024 14:43:51 +0000
ROA not before:           Wed 04 Dec 2024 14:38:51 +0000
ROA not after:            Wed 03 Dec 2025 14:43:51 +0000
asID:                     263484
IP address blocks:        191.242.237.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:77:08:3f:a3:12:1e:af:6c:b8:66:f7:f2:64:36:8e:e7:69:90:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1698795302C7E2A145BFA93BF0B8C9B149DFD43D
        Validity
            Not Before: Dec  4 14:38:51 2024 GMT
            Not After : Dec  3 14:43:51 2025 GMT
        Subject: CN=67E8DB145BC8EFEDE1613DFDD83164DAD7780B96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:c8:2b:a2:e6:62:ce:66:20:10:90:38:8b:11:
                    1e:e7:99:67:1d:23:5a:d2:32:cd:05:f2:3e:d2:e9:
                    cc:c9:4b:75:70:9a:01:fa:5a:11:af:eb:b2:f8:b1:
                    41:e2:9e:e3:07:b0:51:f4:22:c9:b8:17:f9:1a:16:
                    96:36:73:57:37:5a:57:b5:ab:55:32:07:a8:3f:91:
                    5e:d3:c2:08:d5:87:21:a7:b1:25:09:88:56:1f:88:
                    62:73:90:b7:08:b3:3e:e6:36:4b:73:7e:98:95:2b:
                    41:48:6f:b5:c8:68:52:52:52:b6:55:a3:46:ec:f4:
                    c1:85:0d:d8:5d:a0:77:61:05:4e:4b:1e:82:ba:c7:
                    07:18:c7:57:ef:3b:89:36:0d:da:3f:ab:4c:e5:67:
                    9c:1f:a0:03:b1:42:bb:bf:96:01:da:59:b4:61:bf:
                    87:6f:2e:25:3c:dd:64:ef:9c:0e:33:9a:cc:21:2e:
                    bc:34:3e:e5:be:dd:19:01:d9:41:d2:9c:b3:c0:a7:
                    0e:6d:94:7a:1d:cd:08:d8:af:a4:8f:09:81:22:4c:
                    00:be:2a:7f:c3:69:14:4c:e1:86:0f:1e:11:ae:e7:
                    90:ee:89:6c:4b:9b:40:b9:4a:3c:fc:bd:ad:e1:f4:
                    aa:10:80:79:3b:32:8d:1c:1f:19:50:b7:44:06:12:
                    b8:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:E8:DB:14:5B:C8:EF:ED:E1:61:3D:FD:D8:31:64:DA:D7:78:0B:96
            X509v3 Authority Key Identifier:
                keyid:16:98:79:53:02:C7:E2:A1:45:BF:A9:3B:F0:B8:C9:B1:49:DF:D4:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AsFirMsKYkNhFDbnVru1zhhrRvGEgq95xZcNkHp4CvYR/0/1698795302C7E2A145BFA93BF0B8C9B149DFD43D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1698795302C7E2A145BFA93BF0B8C9B149DFD43D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AsFirMsKYkNhFDbnVru1zhhrRvGEgq95xZcNkHp4CvYR/0/3139312e3234322e3233372e302f32342d3234203d3e20323633343834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.242.237.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8e:a2:35:50:51:52:e0:75:56:bf:a8:72:9e:1c:b9:d7:83:3c:
         82:be:1e:b0:38:cf:f8:fd:34:60:df:47:b7:9e:d1:86:a1:ad:
         87:13:4e:d1:7f:82:16:ad:27:d8:76:f5:14:63:ce:08:db:52:
         95:47:e7:a0:65:8d:64:fc:d1:c2:c5:fb:b8:be:14:23:ed:90:
         99:2c:cb:59:21:cd:ee:5d:96:48:f1:84:be:1f:a0:97:29:a6:
         09:49:b2:f0:08:37:78:68:14:ae:dc:39:67:38:7e:6c:eb:5c:
         39:ec:65:4d:2d:57:51:c0:4f:51:89:57:24:28:c2:29:a4:7f:
         91:69:9a:86:17:56:df:6d:52:89:c8:b6:70:21:b6:a0:9e:75:
         dc:d4:f3:6b:38:5b:c8:9b:e7:28:b0:46:60:4e:43:6c:83:f1:
         22:ea:e6:ef:c2:4a:15:b6:bd:67:9d:58:7d:38:55:4d:8e:10:
         1f:2e:f7:2c:f5:15:67:b8:d0:ba:d1:1c:61:1f:03:07:9b:8b:
         8e:5f:f9:9a:b2:2f:65:8d:79:aa:67:62:1b:42:a6:ad:5d:ab:
         ea:cb:aa:3b:5f:27:d1:b9:cb:e9:dc:54:28:d0:7c:b6:7c:6e:
         ff:ff:4d:f7:ea:02:59:15:13:4f:3e:c2:e3:70:65:27:87:d9:
         42:06:9b:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:30:08 2025 by rpki-client